mirror of
https://git.freebsd.org/ports.git
synced 2025-06-18 03:00:42 -04:00
367e8ff5cc
- Adds TLSv1.3 support with security/openssl111 PR: 232687 Submitted by: Pascal Christen <pascal christen hostpoint.ch> Reported by: Markus Kohlmeyer <rootservice gmail com> Reviewed by: ohauer Approved by: joneum Differential Revision: https://reviews.freebsd.org/D17668
20 lines
899 B
C
20 lines
899 B
C
--- modules/ssl/ssl_engine_init.c.orig 2018-02-13 23:43:36 UTC
|
|
+++ modules/ssl/ssl_engine_init.c
|
|
@@ -547,7 +547,7 @@ static apr_status_t ssl_init_ctx_protoco
|
|
char *cp;
|
|
int protocol = mctx->protocol;
|
|
SSLSrvConfigRec *sc = mySrvConfig(s);
|
|
-#if OPENSSL_VERSION_NUMBER >= 0x10100000L
|
|
+#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !(defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x20700000L)
|
|
int prot;
|
|
#endif
|
|
|
|
@@ -1492,7 +1492,7 @@ static apr_status_t ssl_init_proxy_certs
|
|
X509_STORE_CTX *sctx;
|
|
X509_STORE *store = SSL_CTX_get_cert_store(mctx->ssl_ctx);
|
|
|
|
-#if OPENSSL_VERSION_NUMBER >= 0x1010100fL
|
|
+#if OPENSSL_VERSION_NUMBER >= 0x1010100fL && !defined(LIBRESSL_VERSION_NUMBER)
|
|
/* For OpenSSL >=1.1.1, turn on client cert support which is
|
|
* otherwise turned off by default (by design).
|
|
* https://github.com/openssl/openssl/issues/6933 */
|